This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft File: C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft (raw, json) Hash identifier: 0rinoKKZYQFqJJGskZyFI+HRZNEEV0xNafNjLqAl1X4= Subject key identifier: 52:21:3C:97:FF:5E:FA:DD:A9:5C:26:81:24:1A:F7:E8:ED:F8:03:B5 Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F Certificate issuer: /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Certificate serial: 49D2C5F9402341A50D52453E9C64E121A8B5D024 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft Manifest number: 04CA Signing time: Sun 25 Jan 2026 08:02:09 +0000 Manifest this update: Sun 25 Jan 2026 07:57:09 +0000 Manifest next update: Wed 28 Jan 2026 14:03:09 +0000 Files and hashes: 1: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: JEJ2gtjqR3xoAWSFfThnnAX4k9LDg24aEZrng1n0P04=) 2: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: SZcb1mBv7DekH6untdETGe0D1z9cA9VcoDjOf2l6JsU=) 3: C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl (hash: 4UjPzUyUYno6LLijvrlryrxhxBjdEsUj/r2YjUg8OIY=) 4: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: QCfD8qeAQE97bNj4JFmZ7141O7lTEcCS9gxeLKd+OXI=) 5: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: c0jEtUhY3CCnihYNexzABK/peyf3Gx5R2jF1ZOsdS10=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d2:c5:f9:40:23:41:a5:0d:52:45:3e:9c:64:e1:21:a8:b5:d0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Validity Not Before: Jan 25 07:57:09 2026 GMT Not After : Jan 28 14:03:09 2026 GMT Subject: CN=52213C97FF5EFADDA95C2681241AF7E8EDF803B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4a:6c:3d:eb:c6:50:32:39:59:c5:c4:3d:fd: 8f:a3:70:33:96:9d:d9:44:7e:92:cf:f8:db:8a:f9: 0b:62:da:f7:b3:cc:cc:f5:e4:57:bc:fe:5b:f6:38: f3:9c:db:06:a8:f4:cf:62:e9:27:cb:c8:de:7a:9a: da:c8:97:6a:db:3b:75:aa:57:34:f7:7a:7c:b2:c4: e0:af:2a:1e:7c:e1:ec:7d:85:62:3e:cc:41:e6:0d: 37:1a:88:ce:54:e2:e3:f8:d0:5b:5f:56:7e:85:89: 07:91:92:33:9c:8a:dd:97:c4:b2:09:b7:d7:dc:fd: 87:d8:1f:39:46:e3:d0:2c:eb:99:f1:76:f3:a8:3d: f1:60:b2:ee:e0:34:6c:90:d6:4e:03:49:ec:c9:64: 88:84:ca:fb:fd:97:0b:10:b4:39:88:4a:35:2c:f9: 64:3b:fd:0a:b7:64:96:f6:41:7e:58:16:25:e4:b7: fa:28:81:8e:0b:ac:b5:e2:6c:ee:25:6d:00:c4:67: 9b:dc:e6:38:e1:f6:b9:5f:e2:d1:7b:6b:48:40:29: e4:cc:d9:3d:56:d5:08:25:63:c7:20:ab:b1:d5:a7: 51:d3:1f:91:8f:76:70:52:b2:3d:1b:cf:3c:0d:21: 55:f7:34:ed:9a:3f:2c:3d:18:fd:37:17:2f:04:f1: 60:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:21:3C:97:FF:5E:FA:DD:A9:5C:26:81:24:1A:F7:E8:ED:F8:03:B5 X509v3 Authority Key Identifier: keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:2b:b6:14:5f:3a:89:17:f3:6c:f3:cf:d4:c2:2b:12:7c:f3: 2e:f0:2b:7e:03:2d:b1:0f:e5:8e:3a:c8:f5:e1:8d:e2:32:b7: 91:19:fd:08:c4:e3:a7:e6:e7:b2:57:18:00:90:47:c5:c1:d9: c4:c1:d7:11:62:b5:94:12:02:b8:0f:ba:f9:74:d3:ad:5a:e2: 83:7b:03:98:84:d1:78:5d:8f:1f:c7:37:92:53:80:05:28:4e: 84:71:cf:8e:bd:e6:5e:c7:6e:9a:fe:a1:9a:37:14:f8:6a:f7: 60:86:68:0f:0b:59:f3:ab:24:4f:b1:58:a4:a6:46:61:22:b1: 27:16:77:bc:41:ec:fc:b7:77:c7:60:2e:b4:27:7c:08:f0:d2: 16:e8:9b:53:80:e4:cc:9f:3b:97:6d:cb:4e:c6:55:3b:f6:c0: ff:56:53:c9:22:ce:3e:a9:7a:f9:89:96:ea:70:b1:11:ff:eb: 4c:5d:8f:1d:4e:4f:77:ce:19:01:b1:39:1c:e3:93:6c:bf:fa: ec:24:1e:9f:3c:8a:d5:01:a8:e5:78:e8:54:79:51:8c:a2:ba: ce:b9:86:42:fe:e5:27:b2:09:12:0a:70:3f:fb:fd:3b:16:08: 47:2a:d8:22:36:0a:9c:81:f2:1a:a0:cc:06:34:49:57:45:b6: 1e:61:36:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSdLF+UAjQaUNUkU+nGThIai10CQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRD MjIzNEUyRjAeFw0yNjAxMjUwNzU3MDlaFw0yNjAxMjgxNDAzMDlaMDMxMTAvBgNV BAMTKDUyMjEzQzk3RkY1RUZBRERBOTVDMjY4MTI0MUFGN0U4RURGODAzQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvSmw968ZQMjlZxcQ9/Y+jcDOW ndlEfpLP+NuK+Qti2vezzMz15Fe8/lv2OPOc2wao9M9i6SfLyN56mtrIl2rbO3Wq VzT3enyyxOCvKh584ex9hWI+zEHmDTcaiM5U4uP40FtfVn6FiQeRkjOcit2XxLIJ t9fc/YfYHzlG49As65nxdvOoPfFgsu7gNGyQ1k4DSezJZIiEyvv9lwsQtDmISjUs +WQ7/Qq3ZJb2QX5YFiXkt/oogY4LrLXibO4lbQDEZ5vc5jjh9rlf4tF7a0hAKeTM 2T1W1QglY8cgq7HVp1HTH5GPdnBSsj0bzzwNIVX3NO2aPyw9GP03Fy8E8WBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUiE8l/9e+t2pXCaBJBr36O34A7UwHwYDVR0j BBgwFoAUxR9kj92IkTl+ogs09t4DbcIjTi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTA3ZmQ4YS0xNTBmLTQ1M2YtYTBmNS01N2VhZDQxZWQwMzIvMC9DNTFGNjQ4RkRE ODg5MTM5N0VBMjBCMzRGNkRFMDM2REMyMjM0RTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRDMjIz NEUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAz NkRDMjIzNEUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANQrthRfOokX82zzz9TCKxJ88y7wK34DLbEP 5Y46yPXhjeIyt5EZ/QjE46fm57JXGACQR8XB2cTB1xFitZQSArgPuvl0061a4oN7 A5iE0Xhdjx/HN5JTgAUoToRxz4695l7Hbpr+oZo3FPhq92CGaA8LWfOrJE+xWKSm RmEisScWd7xB7Py3d8dgLrQnfAjw0hbom1OA5MyfO5dty07GVTv2wP9WU8kizj6p evmJlupwsRH/60xdjx1OT3fOGQGxORzjk2y/+uwkHp88itUBqOV46FR5UYyius65 hkL+5SeyCRIKcD/7/TsWCEcq2CI2CpyB8hqgzAY0SVdFth5hNlc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:54:55 2026 by rpki-client